CVEs related to OpenJDK, runc, vim, and the Linux kernel in vCenter Server

Products

• VMware vCenter Server

Issue/Introduction

Following CVEs were reported by Nessus Vulnerability scanner :

1) 1) CVE: CVE-2020-14779,CVE-2020-14781,CVE-2020-14782,CVE-2020-14796,CVE-2020-14797,CVE-2021-2161,CVE-2021-2163,CVE-2021-2341,
CVE-2021-2369,CVE-2021-2388,CVE-2021-35550,CVE-2021-35556,CVE-2021-35559,CVE-2021-35561,CVE-2021-35565,CVE-2021-35567,CVE-2021-35586,CVE-2021-35603,CVE-2022-21248,CVE-2022-21271,CVE-2022-21277,CVE-2022-21282,CVE-2022-21283,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21296,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21360,CVE-2022-21365,CVE-2022-21366,CVE-2022-21426,CVE-2022-21434,CVE-2022-21443,CVE-2022-21476,CVE-2022-21496,CVE-2022-21540,CVE-2022-21541,CVE-2022-21618,CVE-2022-21619,CVE-2022-21624,CVE-2022-21626,CVE-2022-21628,CVE-2022-34169,CVE-2022-39399,CVE-2023-22006,CVE-2023-22036,CVE-2023-22041,CVE-2023-22045,CVE-2023-22049,CVE-2023-22081,CVE-2024-20918,CVE-2024-20919,CVE-2024-20921,CVE-2024-20926,CVE-2024-20945,CVE-2024-20952,CVE-2024-21011,CVE-2024-21012,CVE-2024-21068,CVE-2024-21085,CVE-2024-21094,CVE-2024-21131,CVE-2024-21138,CVE-2024-21140,CVE-2024-21144,CVE-2024-21145,CVE-2024-21147,CVE-2024-21208,CVE2024-21210,CVE-2024-21217,CVE-2024-21235,CVE-2025-21502,CVE-2025-21587,CVE-2025-30691,CVE-2025-30698,CVE-2026-21925,CVE-2026-21932,CVE-2026-21933,CVE-2026-21945

These CVEs are related to openJDK11 component..

2) CVE-2019-16884,CVE-2025-31133,CVE-2025-52565,CVE-2025-52881

These CVEs are related to runc component.

3) CVE-2026-26269

This CVE is related to vim component.

4) CVE-2026-23221

This CVE is related to linux component.

Environment

vCenter Server 8.x

Resolution

All the CVEs mentioned in this KB will be fixed in the upcoming quarterly patch 8.0 patch 09.